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WORKPIECE AUTHENTICATION BASED UPON ONE 
OR MORE WORKPIECE IMAGES 

CROSS-REFERENCE TO RELATED APPLICATIONS 

The subject plication claims the priority of copending U.S. Provisional Appli- 
5 cation Serial No. 60/130,666, filed April 23, 1999, entitled "Authentication Techniques 
Using Physical Uncopyability Primitive And Cryptographic Security." The entirety of 
the disclosure of said copending application is hereby incorporated by reference into 
the subject ^plication. The subject application also is related to copending U.S. De- 
sign Patent Application Serial No. 29/11 1,375, filed September 24, 1999, entitled "En- 
10 velope \^^th Postal Indicia And Related Items Having Unique Ornamental Appear- 
ance.** 

BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention relates generally to workpiece authentication techniques, 
15 and more specifically, to such techniques ^ch involve imaging one or more portions 
of the Mrorlq>iece to generate abstractions (e.g., numeric or alphanumeric strings) which 
represent random physical characteristics of the workpiece that may be used to deter- 
mine Miiether the worlq)iece is authentic. Although the present invention will be de- 
scribed in connection with authenticating postal mailpieces based upon such abstrac- 
20 tions, it should be appreciated that the present invention has other utilities, including 
authenticating worlq)ieces other than postal mailpieces. 
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Brief Descrption of Related Prior Art 

A value indicium is a symbol or token that indicates payment for a service. One 
example of a commonly-used value indicium is the "fianking" or postal meter mark, 
which is placed on a postal mailpiece to indicate that a specified amount of money has 
been paid to post the mailpiece. Other examples of value indicia include i)aper cur- 
rency, money orders, and tickets for cultural events and transportation. 

Authentication indicia are symbols or tokens placed on or in a woikpiece for 
use in determining the validity of the workpiece (e.g., Aether the workpiece is authen- 
tic, as opposed to being a forgery). For example, legal documents, such as passports 
and driver's licenses often have validation stamps/seals fix)m a certifying authority 
(CA), such as the government, placed on them that vouch for the authenticity of the le- 
gal documents. 

In the past, if a postal fianking mark on a postal mailpiece sqspeared to the ordi- 
nary observer (e,g., a postal clerk) to have been made by an authorized postal firanldng 
device, the mailpiece would be considered valid and would be posted without fiirther 
inquiry into Miiether the mark was genuine. Unfortunately, improvements in photo- 
copying, computer-based imaging and duplication technologies have rendered this prior 
art authentication technique unreliable, as they have permitted the unscrupulous to pro- 
duce high quality forgeries of such firanking marks that often appear genuine to the or- 
dinary observer. This has driven interest in creating a postal firanldng inark vsdiose 
authenticity can be determined without reference to its appearance, but instead can be 
determined using different criteria. 
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In one such conventional validation technique, the franking mark comprises an 
indicium that contains certain identifying infomiation, such as the postage purchase 
date, meter identification number, franking sequence number, source and destination 
addresses of the mailpiece, and a cryptographic signature of the identifying informa- 
5 tion. According to tUs technique, mailpiece forgeries are detected based upon whether 
differences exist between the identifying information and the ciyptogr^hic signature in 
the indicium, and the actual identifying information of the mailpiece and the actual 
ciyptogr^hic signature of such actual identifying information. 

Unfortunately, this latter validation technique is unable to thwart certain types 
10 of postal franking fraud. For example, if the identifying information and signature of a 
valid indicium of a first mailpiece are also valid for a second mailpiece, tiien the indi- 
cium of the first mailpiece may be fraudulently copied onto the second mail piece, and 
the fraudulent copying cannot be detected using this technique. Hereinafter, this type 
of fraud will be termed "double spending fraud." 

15 Additionally, advances in networidng technology have also permitted wide ac- 

cess to the data underlying such franking marks. For example, one could download 
such data using the Intemet from a computer node storing such data (e.g., via email or a 
World Wide Web posting), and dq)ending i^n the manner in which this conventional 
technique is implemented, a large number of seemingly valid franking marks could be 

20 generated based upon such data. This finther exacerbates the possibility and opportu- 
nity for such fraud. 

In one prior art technique that is used to try to thwart double spending fraud, a 
database tracks use of value indicia and the respective identifying information therein. 
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If two mailpieces have identical indicia, the database indicates this as a possible occur- 
rence of double spending fiaud. 

Unfortunately, in practical implementation, this conventional double spending 
fraud detection technique requires use of a large database to track the indicia's identi- 
5 fying information. Disadvantageously, the burden and expense of maintaining and qiie- 
rying such a large database is undesirable. Also disadvantageously, this conventional 
fraud detection technique does not permit ofiF-line verification of die indicia (i.e., not 
based upon information obtained via a netwoik), and no mechaiusm is provided in this 
technique to determine \^ch indicium among indicia determined to be identical is 
10 auOientic. 

Another prior art fraud problem arises when unauthorized use is made of data or 
digital tokens (e.g., stored in a computerized postal franking system's internal memory) 
that when supplied to the system cause it to produce otherwise valid authentication in- 
dicia. This type of fraud will be teimed hereinafter "meter tampering double spending 
15 fraud." 

Other examples of prior art are disclosed in e.g., Melen, U.S. Patent No. 
5,325,167 issued June 28, 1994; Daugman, U.S. Patent No. 5,291,560 issued March 1, 
1994; Causse D'Agraives et al., U.S. Patent No. 4,677,435 issued June 30, 1997; Sa- 
myn, U.S. Patent No. 4,820,912 issued April 11,1 989; Goldman, U.S. Patent No. 
20 4,423,415 issued December 27, 1983; Goldman, U.S. Patent No. 4,568,936 issued Feb- 
ruary 4, 1986; Brosow, U.S. Patent No. 4,218,674 issued August 19, 1980; Deneberg et 
al., U.S. Patent No. 5,521,984 issued May 28, 1996; Sansone, U.S. Patent No. 
4,725,718, issued February 16, 1988; and Fougeiy et al., U.S. Patent No. 4,743,747, 
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issued May 1 0, 1 988. Each of these patents is incorporated herein by reference in its 
entirety. 

SUMMARY OF THE BWENTION 

In accordance with the present invention, a woilq)iece authentication technique 
is provided that overcomes the aforesaid and other disadvantages of the prior art A 
first aspect of the present invention provides an authentication indicium, using this 
technique. In one embodiment of the indicium, the indicium is placed on a workpiece 
for use in determining the workpiece's validity. The indicium comprises a set of one or 
more maridngs that correspond to or represent a unique cryptographic signature fiom a 
CCTtifying authority (CA) and/or a numeric or alphanumeric string. The signature is 
based at least in part upon the string and a cryptogr^hic key belonging to the CA. If 
the woriq>iece is valid, the string is based \spon, at least in part, intrinsic physical char- 
acteristics of one or more portions of the workpiece. The physical characteristics in- 
clude one or more images of sur&ce topogr^hical aH)earance of the one or more por- 
tions of the worlq)iece that result v/ben the one or more portions of the worlq)iece are 
illuminated with electromagnetic radiation fit>m different illumination positions relative 
to these portions of the workpiece. 

The one or more markings may conqnise a barcode, sequence of digits, and/or a 
spread-spectrum marking. The workpiece may be a postal mailpiece. If tiie worlq)iece 
is a valid postal mailpiece, the indiciimi may be printed on the mailpiece by an appara- 
tus (e.g., a postal fianking apparatus), and the string also may be representative of or 
conqsrise a postage value associated with the mailpiece (i.e., an amount of money paid 
to post the mailpiece) and/or an identification number used to identify the apparatus. 
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The string may also be based upon respective numerical values (e.g., representative of 
one or more hash values) representative of the imique physical characteristics, postage 
value, and/or apparatus identification number. 

The different positions from \^ch the worlq>iece is illuminated with electro- 
magnetic radiation may be at respective, different oblique angles of elevation and the 
same azimuihal angle relative to the one or more portions of the workpiece. Advanta- 
geously, by illu min at ing the workpiece from such oblique angles of elevation, the 
physical characteristics may be made more easily discemable than would otherwise be 
the case- Alternatively, the different positions may be at respective, different azimuthal 
angles and the same oblique angle of elevation relative to the one or more portions of 
the workpiece. The radiation with vAnch the woriqpiece is illuminated may comprise 
coherent light The one or more images may be generated from a portion of the illumi- 
nating radiation that is reflected from the one or more portions of the woiiq)iece at an 
angle that is perpendicular to a sur&ce of the workpiece. 

The string may also be based iq)on, at least in part, a concatenation of aplurality 
of numerical hash values derived from the one or more images, or differences between 
or among such unages. The one or more images may be generated by an imaging de- 
vice having a radiation sensing element or elements that may consist of a linear array of 
photosensing elements, a two-dimensional array of photosensing elements, or a single 
photo-sensing element The imaging device may generate the images by scanning the 
one or more portions of the workpiece in accordance with imaging registration or fidu- 
cial marks on the workpiece. The photosensing element or elements of the imagmg 
device may be mtegrated into or comprised within a mechanism for printing the indi- 
cium on the workpiece. 
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Apparatus and methods are also provided which implement aspects of the pres- 
ent invention. One embodiment of an apparatus according to a second aspect of the 
present invention is used to generate an indicium according to the present invention, 
and to place the generated indicium on a \voriq)iece; an embodiment of an apparatus 
according to a third aspect of the present invention is used to analyze a \vo]iq>iece and 
an indicium already present on the worIq)iece to deteraiine whether the workpiece is 
authentic. 

In each of these embodiments of the ^paratus according to the second and third 
aspects of the present invention, the apparatus generates a string for use in determining 
whether the worlq)iece is valid. The £q)paratus includes an electromagnetic radiation 
source that illuminates one or more portions of the worlq)iece with electromagnetic Tst- 
diation fiom different respective illumination positions relative to the one or more por- 
tions of the workpiece. An imaging device comprised in the ^jparatus generates re- 
spective images of sur&ce topogr^hical ^q^earances of the one or more portions of the 
woriq)iece, when the one or more portions of the worlspiece are illuminated with the 
radiation. A string generating mechanism generates the string based upon, at least in 
part, the respective images generated by the imaging device. 

Thus, in accordance witii the present invention, determination of validity of the 
worlq)iece is based vpon random, intrinsic physical characteristics of the woriq[)iece, 
thereby reducing or eliminating the need to perform database queries of identifying in- 
formation to make such determinations. Advantageously, this permits the cost of pre- 
venting and/or thwarting the aforesaid types of fiaud to be reduced compared to the 
prior art Additionally, smce significant effort is typically required to diq)licate the in- 
trinsic woilq)iece characteristics upon which determination of validity of the worlq)iece 
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is based, according to the present invention, this makes the perpetration of fraud more 
difficult and less likely to succeed compared to the prior art. Further advantageously, 
the technique of present invoition permits off-line workpiece and indicia verification 
and also pennits determination of ^lich indicium, among identical indicia, is actually 
authentic. 

These and other features and advantages of the present invention will become 
apparent as the following Detailed Description proceeds and upon reference to the 
Drawings, in i;^ch: 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a highly schematic representation of the layout and elements com- 
prised in a fiont sur&ce of a mailpiece having one embodiment of an indicium in ac- 
cordance with flie first aspect of the present invention. 

Figure 2 is a highly schematic rqjresentation of a portion of the mailpiece of 
Figure 1. 

Figure 3 is a highly schematic represmtation of a variation of the portion of the 
workpiece shown in Figure 2. 

Figure 4 is a highly schematic diagram illustrating the construction of one em- 
bodiment of an apparatus according to the second aspect of the present invention. 

Figure 5 is a highly schematic diagram illustrating the construction of one em- 
bodiment of an q>paratus according to the third aspect of the present invention. 

Figures 6 and 7 are highly schematic diagrams illustrating positions of elements 
of the qjparatus of Figures 4 and 5 relative to the mailpiece of Figure 1 vfbm the appa- 
ratus are in use. 

8 
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Although the following Detailed Description will proceed with reference being 
made to illustrative embodiments and methods of use, it will be appreciated by those 
skilled in the art that many alternatives, modifications, and variations thereof are possi- 
ble without departing &om the present invention. Thus, it is intended that the present 
5 invention should be viewed as encompassing all such alternatives, modifications, and 
variations as will be apparent to those skilled in the art, and should be defined only as 
set forth in the hereinafter appended claims. 

DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS 

With reference being made to Figures 1-7, illustrative embodiments of aspects 
10 of the present invention will now be described. Figures 1-2 illustrate features of a 
woikpiece 1 that includes one embodiment of an authentication indicium 10 made ac- 
cording to one aspect of the present invention. More specifically, in Figures 1-2, work- 
piece 1 is apostal mailpiece that comprises a postal envelope \^ose fiont outer sur&ce 
1 1 includes indicium 10. Sur&ce 1 1 also comprises written postal source address 2 
15 (i.e., of the sender of mailpiece 1) and destination address 4 (i.e., of the intended recipi- 
ent of mailpiece 1) in the upper left comer and center, respectively, of the sur&ce 1 1 of 
mailpiece envelope 1. A postal symbol or artistic gr^hic 6 may also be placed on the 
surface 11 (e.g., in the upper right comer of sur&ce 11 above the indicium 10, as shown 
in Figure 1). 

20 In accordance with this embodiment of this aspect of the present invention, in- 

dicium 10 includes respective markings 7, 8 provided on sur&ce 1 1 of the envelope 1 . 
Maikings 7 comprises a human-readable alphanumeric text disclosing to a human 
reader information that is pertinent to the mailpiece 1, such as, the amount of postage 
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that has been paid to post the mailpiece 1 andthecity and/or country fix>m which the 
mailpiece 1 is being posted. Markings 8 are a uni- or multi-dimensional bar code 
and/or sequence of human-readable digits that correspond to or represent a crypto- 
graphic signature, and/or a numeric or alphanumeric string. As will be described more 
fully below, markings 8 of indicia 10 may be used, in accordance with aspects of the 
present invention, to determine validity of the workpiece 1 - 

As shown in Figure 2, nuukings 9 comprise a fiducial square or box 20 that en- 
closes a portion 29 of the surface 1 1 of worlqnece 1 , and two fiducial points or dots 22, 
24 therein adjacent respective, diagonally-opposite comers of box 20. Each of the dots 
22, 24 is spaced away fiom a respective comer of the box 20 by a respective, identical 
distance. 

AltCTnatively, as is shown in Figure 3, marking 9 may be replaced with mark- 
ings 9'. Markings 9' mclude a fiducial square or box 20' that encloses a portion 29 of 
thesurfece 11 ofworkpiece 1, and three fiducial dots 22, 24, 25. The dots 22, 24, 25 
are respectively located adjacent respective comers of the box 20\ More specifically, 
each of the dots 22, 24, 25 is spaced away fiom a respective comer of the box 20' by an 
identical, respective distance. Additionally, the distance between dots 22 and 25 is the 
same as the distance between dots 24 and 25, respectively. 

As noted previously, markings 8 correspond to or are representative of a unique 
cryptogr^hic signature, and/or numeric or alphanumeric string. The signature may be 
the result of encrypting tiiis string using one cryptogr^hic key of a private/public 
cryptographic key pair of a CA (e.g., a governmental authority, such as the U.S. Postal 
Service) that can be used to determine validity of the string, using the other key firom 
the key pair, using well known conventional private/public key encryption techniques. 
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As will be described more fully below, if the mailpiece is valid/authentic, the 
string being represented by or corresponding to the markings 8 is based upon, at least in 
part, certain random, intrinsic physical characteristics (symbolically referred to by nu- 
meral 26) of the portion 29. These physical characteristics 26 include respective im- 
ages (referred to by numeral 47) of surfece topogr^hical appearances (symbolically 
referred to by numeral 27) of the portion 29 that result v**en portion 29 is illuminated 
with electromagnetic radiation R fiom respective different illumination positions 70, 
72, 74 relative to portion 29 (see. Figures 4-7). That is, as will be described more fully 
below, the string represented by or corresponding to markings 8 is based i^n or de- 
rived from respective images 47 of sur&ce topogr^hical qypearances 27 of the portion 
29 ftat result when portion 29 is illuminated with electromagnetic radiation R origi- 
nating from respective positions 70, 72, 74 relative to the portion 29. As used herem, 
the terai "image" may include any combination of one- and/or two-dimensional sam- 
plings of reflected radiation from the sur&ce 1 1 . 

These surface topographical qypearances 27 include details of certain micro- 
scopic phenomena that are random and result from mtrinsic three dimensional proper- 
ties of the sur&ce 1 1 in portion 29. Such microscopic phenomena may include e.g., the 
qjpearances of and/or structures associated with mountains, craters, material configu- 
rations, and fiber configurations of the physical elements comprising portion 29. 

The string comprises a numerical hash value that is computed using a predeter- 
mined hashing algorithm that operates i^n numerical values representative of the im- 
ages 47. Ideally, the algorithm should be selected such that it generates identical re- 
spective hash values when siq)plied with identical respective groiqis of images 47. 
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One example of such a hashing algorithm is the identity function. That is, im- 
ages 47 may be converted into respective sets of numerical values (i.e., digitized), the 
sets of numerical values may be concatenated with each other, and the value of the re- 
sulting concatenation may serve as the hash value. In practice, however, it will usually 
be desirable to employ a hashing algorithm that compresses (i.e,, reduces the amount of 
data comprised in the sets of numerical values). For example, binary thresholded vi- 
sions of the sets of numerical values may be concatenated to form the hash value, al- 
though typically much more compression will be desired. Alternatively, the sets of 
numerical values may be compressed with a lossy compression algorithm, such as 
JPEG or wavelet compression, and concatenated. Also alternatively, in practice, a 
smaU nimiber of coefSdents fiom discrete cosine transfomos, discrete Fourier trans- 
forms, or wavelet transforms of the sets of numerical values may be used to form the 
hash value. 

Further alternatively, the hash value may be generated using an algorithm that 
first extracts fiom the digitized images respective rectangular image portions of prede- 
termined size (e.g., respective digitized image data corresponding to the respective im- 
age regions). These image regions may be 10 pixel rows by 200 pixel columns in size. 
Each of flie image portions may thea be scaled to a desired size, and undergo low pass 
filtering that permits verification using the ultimately-generated hash value to be less 
sensitive to noise-related errors. This low pass filtering may comprise a transverse low 
pass filtering which is accomplished by averaging pixel illumination values in respec- 
tive columns along respective columns of the respective scaled images, and using the 
ava:age pixel illumination values generated as values for pixels in a resulting trans- 
versely low pass filtered image. More specifically, the respective average pixel values 
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are used as the respective values of pixels in the filtered image that correspond to the 
respective first pixel values in the respective columns used to generate the average 
pixel values. The averaged columns may each have the same size (e.g., 10 pixel val- 
ues). Respective corresponding regions are then extracted fiom the transversely low 
pass filtered images (e.g., corresponding regions of I pixel by 100 pixels). These ex- 
tracted regions then undergo a longitudinal high pass filtering. The high pass filtering 
may be accomplished by longitudinally low pass filtering the extracted regions and then 
subtracting corresponding pixel values of the longitudinally low pass filtered images 
fix>m the respective, original extracted regions fiom which they were generated. The 
resulting high pass filtered images may tfien undergo binary thresholding, and the re- 
spective numerical values generated therefix)m may be concatenated to form the hash 
value. 

In order to decrease the size of the resulting hash value, and increase the dis- 
criminatory power of each bit of the hash value a majority of the pixels comprising the 
images 47 may be ignored when calculating the hash value. For example, the images 
may be broken down into groups of contiguous pixels (e.g., 5 contiguous pixels), and in 
each such pixel groiq>, only a single corresponding pixel may be used in generating the 
hash value. 

Additional techniques for generating the hash value include basing the hash 
value i^n pairwise differences of corresponding pixel illumination values of pairs of 
images, sequential differences of these corresponding illumination values, and/or prin- 
ciple components representations of the images. 

Figure 4 is a highly schematic diagram of one embodiment of an apparatus 30 
for generating and placing marks 7, 8 of indicium 10 on surface 1 1 of envelope work- 
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piece 1 . As shown in Figure 4, apparatus 30 includes controller 32. Controller 32 in- 
cludes computer-readable memory 33 (e.g., comprising random access, read-only, 
and/or mass storage memory) for storing software programs and associated data struc- 
tures for execution by one or more processors also comprised in controller 32 and/or 
other elements of ^paratus 30. When executed by the one or more processors in appa- 
ratus 30, the software programs and data structures cause the controller 32 and other 
elements of apparatus 30 to cany out and/or implement the techniques, functions, and 
operations described herein as being carried out and/or implemented by controller 32 
and other elements of £q>paratus 30. It will be apparent to those skilled in the art that 
many types of conq>uter processors and memories may be used in controller 32 without 
departing from the present invention. For example, controller 32 may comprise one or 
more Intel 80X86-type processors and associated memory. 

User input/output device 48 comprises a conventional mechanism for inter&c- 
ing a human user (not shown) to the controller 32 so as to permit the user to control and 
monitor operation of apparatus 30. Device 48 may include, for example, one or more 
conventional computer-user inter&ce devices, such as pointing and keyboard input de- 
vices, and a display output device ^ch together permit the human user to input com- 
mands to controllo: 32 to be performed by qjparatus 30, and to receive from controller 
32 indication of receipt and progress of tqiparatus 30 in executing the input commands. 

Apparatus 30 also includes a mechanism 38 for receiving the envelope 1 and for 
moving the envelope 1, once received, so as to position the envelope 1 relative to an 
electromagnetic radiation source 34 and imagiTig device 46 in such a way as to permit 
generation of images 47 by device 46. More specifically, mechanism 38 comprises 
conventional electromechanical components that permit the envelope 1 to be physically 



14 



wo 00/65541 



PCT/USOO/10535 



inserted into mechanism 38, and thereafter, to be moved relative to source 34 and de- 
vice 46, in the following manner. 

After envelope 1 is physically inserted into mechanism 38, mechanism 38 sig- 
nals controller 32 that envelope 1 has been received by mechanism 38. In response to 
this signal from mechanism 38, controller 32 activates registration sensor 40. Sensor 
40 comprises conventional components for optically scanning the envelope sur&ce 1 1 
and for detemuning based upon such optical scanning the position and orientation of 
registration marks 9 relative to the source 34 and device 46. At periodic time intervals 
after its activation, sensor 40 provides to controller 32 information concerning the po- 
sition and orientation of the marks 9 relative to the source 34 and device 46 fiom which 
controller 32 may determine the registration of the portion 29 relative to Ae source 34 
and device 46. Controller 32 provides commands to mechanism 38 that cause mecha- 
nism 38 to move the envelope 1 relative to the soiirce 34 and device 46 such that the 
source 34 and device 46 are brought into an initial predetermined registration relative to 
the portion 29. 

In this initial registration, the source 34 is positioned at position 70 relative to 
the sur&ce 1 1 of portion 29 in \^ch an electromagnetic beam of illuminating radiation 
R may be emitted ftom tiie source 34 at an oblique elevation angle relative to the sur- 
fece 1 1 of portion 29, and at an azimuthal angle of zero relative to the portion 29. Also, 
in this initial registration, the centroid of radiation sensing element(s) of the device 46 
is positioned directly above the centroid of the portion 29. That is, device 46 comprises 
one or more radiation sensing elements that may include, e.g., a two-dimensional im- 
aging camera, a linear array of photosensing elements (e.g., charge coiq)Ied devices) or 
a single such element In this initial registration, if the device 46 comprises a two- 
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dimensional array of sensors, the centroid of the radiation sensing elements of device 
46 is positioned directly above the centroid of the portion 29. 

After the source 34 and device 46 are in this initial registration relative to the 
portion 29, the controller 32 causes the source 34 to emit a beam R of illuminating ra- 
diation which strikes the surfece 11 of portion 29, A portion P of the radiation beam R 
is reflected fix>m the sur&ce 11 of portion 29 at an angle that is normal (i.e., perpen- 
dicular) to portion 29, This portion P of the radiation beam R is received by the sensing 
element(s) of device 46, which generate fix)m portion P an image of the sur&ce topog- 
raphical qjpearance 27 of the portion 29. Etevice 46 then digitizes this image and sup- 
plies Ae digitized image to hash value generator 42. Generator 42 then stores Ae dig- 
itized image in a computer-readable memory (not shown), and indicates to controller 32 
that it has received and stored the digitized image. 

Controller 32 then causes mechanism 38 to change the registration of portion 29 
relative to the source 34. In this dianged registration, the source 34 is positioned in po- 
sition 72, wherein yet another radiation beam R may be emitted fix)m the source 34 at 
the oblique angle of elevation relative to the surfece 1 1 of portion 29 and at an azi- 
muthal angle of 90 degrees relative to the pordon 29. In this changed rcgistiation, if the 
device 46 comprises a two-dimensional array of soisors, the centroid of the radiation 
sensing element(s) of the device 46 is positioned directly above the centroid of the por- 
tion 29, and flie registration of the sensing element(s) relative to the portion 29 is un- 
changed bom the initial registration. 

Controller 32 then causes source 34 to emit another radiation beam R, which 
strikes portion 29 such that a portion P of the beam R is reflected from the surface 1 1 
and is received by the device 46. Device 46 converts this portion P into another unage 
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of the surface topographical appearance of the portion 29, and digitizes this image. The 
digitized image is then transmitted to the hash value generator 42, which stores the dig- 
itized image and indicates to the controller 32 that it has received and stored the digit- 
ized image. 

Controller 32 then causes mechanism 38 to change the registration of portion 29 
relative to the source 34. In this changed registration, the source 34 is positioned in po- 
sition 74, \^erein yet another radiation beam R may be emitted fix>m the source 34 at 
the oblique angle of elevation relative to the sur&ce 11 of portion 29 and at an azi- 
muthal angle of 180 degrees relative to the portion 29. In this changed registration, the 
centroid of the radiation sensing element(s) of the device 46 is positioned directly 
above the centroid of flie portion 29, and the registration of the sensing element(s) rela- 
tive to the portion 29 is unchanged fix)m the initial registration. Controller 32 then 
causes source 34 to emit yet another beam of radiation R such that beam R strikes por- 
tion 29 and a portion? of the beam R is reflected from the sur&ce 11 ofportion29and 
is received by the light sensing element(s) of device 46. Imaging device 46 converts 
this reflected portion P of radiation beam R into another image of the sur&ce topog- 
raphical features 27 of portion 29. This image is then digitized and transmitted to gen- 
erator 42 ^ch stores the image. 

After generator 42 has stored three images of respective sur&ce topogr^hical 
^pearances of portion 29 that resulted \^en source 34 illuminated portion 29 with ra- 
diation bom three respective azimuthal angles relative to the portion 29 (i.e., corre- 
sponding to source positions 70, 72, and 74), generator 42 generates fiom the three im- 
ages a hash value, using one of the previously described hash value generation algo- 
rithms. The hash value generated by generator 42 is then transmitted to controller 32. 
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Controller 32 then retrieves fix)m the memory 33 a previously stored identifica- 
tion number that is used to identify the apparatus 30, and receives &om the I/O device 
48 a user-inputted postage value for the mailpiece 1 . Controller 32 then concatenates 
the hash value with the apparatus identification number and the user-inputted postage 
value, in a predetermined fesfaion, so as to enable each of these values (i.e,, the hash 
value, apparatus identification number, and postage value) to be extracted &om the re- 
sultant concatenation vfhen a predetermined extraction algorithm is applied to the re- 
sultant concatenation. Othervaluesmay also be so concatenated with the hash value 
(e.g., indicium version number, algorithm identification number, certificate and postal 
service device serial number, manufiicturer identification number, ^paratus model 
identification number, date of posting, asc^iding and descending register value, license 
post ofBce zip code, apparatus software version identification number, destination de- 
livery point code, and/or mail category/class code). The controller 32 then causes 
printing mechanism 36 to prmt markings 8 on surface 11 that correspond to or represent 
the resultant concat^uKtion of the apparatus identification number, postage value, and 
hash value. The string once generated may be uploaded to the certifying authority 44 
via ustwoAAS. The certitying authority 44 may then ciyptogmphically sign the string 
provided to it by the controller 32 of qiparatus 30, and may return the cryptographi- 
cally signed string to the controller 32 via the network 45. Altematively, if the con- 
troller 32 and memory 33 of apparatus 30 are tamper-resistant, the cryptographic key 
used to sign the string may be stored in memory 33. Controller 32 may then cause print 
mechanism 36 to print marks 8 onto sur&ce 11 that correspond to or represent the 
cryptographically signed concatenation and decrement a mavtimim postage value 
stored in the tamper-resistant memory. Controller 32 may also cause printer 36 to place 
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marks 7 onto the surface 1 1 of the mailpiece 1; the information represented by the one 
or more marks 7 may be supplied to the controUer 32 by a human user via device 48 
and/or may be prestored in memory 33 and retrieved therefrom by controller 32. The 
infomoation comprised in the string may be transmitted to the CA for storage in a data- 
base for use in ensuring timt the purchaser of postage is properly charged for the post- 
age being used to post the mailpiece 1 , and for other purposes that will be described 
below. Alteniatively, or in addition thereto, the user of apparatus 30 inay be required to 
log onto networic 45 and to provide via networic 45 information necessary to enstire 
identity of the user and the postage value prior to receiving the signed string fiom the 
C A to ensure proper charging of the postage to the user. 

As stated previously, maikings 8 may comprise uni- or multi-dim^iisional bar- 
codes and/or one or more human-readable sequences of digits. Alternatively, or in ad- 
dition thereto, markings 8 may comprise one or more spread-spectrum markings 
wherein information fiom vMch the string, cryptographic signature of the string, and/or 
constituent portions thereof may be obtained, is 'ludden", and retrievable therefix>m in 
accordance with the teachings of copending U.S. Provisional Patent Application Serial 
No. 60/139,758, entitled "Infonnation Hiding" ffled June 15, 1999, and commonly 
owned with the subject application; the entirety of the disclosure of said copending ap- 
plication is incorporated into the subject plication by reference. 

Registration marks 9 may be placed on sur&ce 11 by the manu&cturer of the 
mailpiece 1 (i.e., prior to processing of the mailpiece 1 by apparatus 30). Alternatively, 
if 2?)propriately modified, apparatus 30 may be configured to print the registration 
marks 9 at a predetermined location (Le., the location that comprises portion 29) on sur- 
fece 1 1, using printing mechanism 36. That is, the apparatus 30 may generate the im- 
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ages 47 and may then bring marks 9 so as to delimit the portion 29 of the woriq)iece 1 
from winch the images 47 were generated. Also alternatively, if apparatus 30 is appro- 
priately modified, images 47 may be of topogr^hical appearances of a plurality of dif- 
ferent portions 14, 16, 29 of the envelope 1. 

Depending upon the type of imaging device 46 used in apparatus 30, the device 
46 may generate the images 47 by scaiming the portion 29 in a direction from one pre- 
determined registration dot (e.g., dot 22) to another dot (e.g., dot 24), Alternatively, if 
the device 46 comprises a linear array of photo-sensors or a single photosensing ele- 
ment, the device 46 may separately scan "strips" or contiguous two-dimensional re- 
gions of the portion 29 and may generate respective composite images from which the 
hash value may be generated. Also, the illumination strmgtfa (i.e., amplitude) of the 
beam Rmay be adjusted so as to be equal to an empirically-determined "optimal" illu- 
mination strength (i.e., an illumination strength that provides an image with mayim iim 
contrast). 

Figure 5 is ahighly schematic diagram of an apparatus 41 for validat- 
ing/authenticating a mailpiece purporting to have an indicium according to the first as- 
pect of the present invention. It should be understood that, unless specifically stated to 
Ae contrary, ttie components and operation of like-numbered elements of q>paratus 30 
and 41 are substantially identical. Apparatus 41 generates the hash value by illuminat- 
ing and unaging the mailpiece 1 in the same way as ^paratus 30. Once generated by 
generator 42, the hash value is supplied to controller 32 of ^paratus 41 . Controller 32 
of apparatus 41 stores the hash value from generator 42 in memory 33 of apparatus 41. 
Controller 32 then causes indicia reader 52 (e.g., comprising a conventional optical 
scanning system) to scan tiie marks 8 and to generate therefrom a digitized image of 
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marks 8 that is siq)plied to controller 32 of apparatus 41, Using conventional optical 
character and/or barcode recognition techniques, and/or the spread-spectrum informa- 
tion retrieval techniques finom the aforesaid commonly-OAvned provisional application, 
the controller 32 generates fiom the digitized image from reader 52 the string and/or 
cryptographic signature of the string corresponding to or represented by marks 8, 
The controller 32 then may extract fiom the thus generated string the hash 
value, postage value, and apparatus identification number concatenated therein; con- 
troller 32 may then compare the extracted hash value with the hash value stored in 
memory 33 that was provided to controller 32 fiom generator 42 of qiparatus 41 . If the 
two hash values match within a predefined tolerance, the controller 32 may ou^iut to a 
human operator via the device 48 an indication that the mailpiece 1 should be consid- 
ered valid; if the two hash values do not match within a predefined tolerance, the con- 
troller 32 may provide the opposite indication to the operator or to automatic sorting 
equipment 

Alternatively, or in addition thereto, controllCT 32 of ^q>aratus 41 may obtain 
fiom certifying authority 44 a cryptographic key that is expected to be able to verify the 
signature (i.e., the ciyptogr^hic key in the public^rivate key pair that is not the key 
tiiat is expected to have been used to generate the cryptographic signature). The con- 
troller 32 of q>paratus 41 may then use the retrieved cryptogr^hic key to verify the 
signature. If the digitd signature of the string is valid, then the hash valiie contained in 
the string is compared with the hash value stored in memory 3 3 fiom the generator 42, 
and if the two hash values match within a predefined tolerance, the controller 32 of ap- 
paratus41 provides to a human operator via device 48 an indication tiiat the worlq)iece 
should be considered valid- If the two hash values do not match, however, an opposite 
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indication is provided by the controller 32 to the human user via device 48. The other 
information contained in the string (i.e., the postage value and q)paratus identification 
number) may also be compared by the controller 32 with corresponding information 
known to be valid that is supplied to the controller 32 by the operator via device 48 of 
apparatus41. 

For purposes of the hash value comparisons made by controller 32 of apparatus 
41, each hash value being compared may be viewed as a feature vector, and each such 
comparison may be carried out in the following manner. After normalizing the feature 
vectors to be compared such that the length of the normalized vectors is unity, the fea- 
ture vectors may be compared by obtaining an inner product measuring the cosine of 
tiie angle between the vectors in a high dimensional feature space. An inner product 
value that is within a predefined constant threshold for acceptance or rejection, e.g., 

^jproximately a constant multiple of unity divided by a/aT v**iere N is the number di- 
mensions of the feature space, may be defined to indicate that the vectors fix)m which 
the inner product value was generated are uncorrelated, and thus, that the resp 
underiying topographical features firom v^ch the vectors were created are most likely 
different 6om each other. An inner product value near +1 may be defined to indicate 
the converse. To overcome possible mis-regisCration, the two hash values may be com- 
pared taking mto account possible ofifeets, and the highest resulting inner product cor- 
relation score may be used Depending Mpon the device 46, the pixel brightness values 
of the digitized images fix)m device 46 may consist of only positive values. This may 
cause these hnages to have large DC of&ets (i.e., the zero spatial fitquency component 
of the Fourier transforms of the intmges used to generate tiie hash values), which may 
make this inner prodiict comparison technique inaccurate. In order to improve the ac- 
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curacy of this compaiison technique, the DC offset of the images used to generate the 
compared hash values should be eliminated. Beyond eliminating the DC component, 
high pass filtering of the images (or appropriately selecting particular spatial fi:equency 
components thereof) generated by device 46 and thresholding the amplitude value as- 
sociated therewith based upon an empirically determined threshold value (which may 
usually be zero) may help to improve the accuracy of this technique. Other hash value 
comparison techniques may alternatively be used by controller 32 of apparatus 41. 

For example, depending upon the hash value algorithm employed, instead of 
comparing the two hash values, the hash value obtained fiom marks 8 may be parsed 
and decompressed to obtain images tiiat may be compared directly with the images 47 
generated by device 46 of apparatus 41 (i.e., for correlation therewith). Advanta- 
geously, this comparison technique may improve comparison consistency and accu- 
racy. 

Thus, it is evident that there has been provided in accordance with the present 
invention, a workpiece authentication technique that fully satisfies the aims and objec- 
tives, and achieves tiie advantages hereinbefore set forth. It will be apparent to those 
skilled in the art that many alternatives, modifications, and variations of the foregoing 
illustrative embodiments are possible without departing fit)m the present invention. For 
example, although the source 34 has been described as moving relative to the portion 
29 such that source 34 is positioned at different azimuthal angles, but the same angle of 
elevation, relative to portion 29, if apparatas 30, 41 are appropriately modified, source 
34 may instead move relative to portion 29 such that source 34 is positioned at different 
angles of elevation, but the same azimuthal angle, relative to the portion 29. Images 47 
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may be generated when radiation R is emitted firom the source 34 when source 34 is in 
these different elevational angles. Other modifications are also possible. 

For example, the source 34 may include multiple light source and/or fiberoptic 
light emission systems positioned at multiple orientation relative to the worlq)iece. 
These systems may be sequentially activated, or alternatively, may be activated simul- 
taneously to provide Ulumination to the portion 29 &om multiple an- 
gles/orientations^sitions relative to the portion 29 simultaneously. 

Also, apparatus 30 may be modified such lhat controller 32 may cause printer 
36 to print on sur&ce 1 1 maikings representative of or corresponding to the hash value 
generated by generator 42. Such markings may comprise human-readable optical char- 
acter recognizable sequences of digits, uni- or multi-dimensional barcodes, and/or 
spread-spectrum markings within which information from vMch the hash value may be 
obtained is hidden. Alternatively, the hash value may be provided to an end user from 
the m anu f acturer of the envelope via a mass storage memory device (e.g., floppy or 
optical disc encoded to store the hash value), electronic messages sent to the end user 
via a co mmuni ca ti ons network, or via interaction with an object identification tag sys- 
tem wdierein the hash value is stored (e.g., of the type disclosed in copending U.S. pro- 
visional patent plication Serial No. 60/155,495, filed September 23, 1999, entitled 
"Object Identification Tagging"; this copending ^plication is commonly owned with 
tiie subject application and is incorporated herein by reference in its entirety. Theend 
user may then request that the C A sign the hash value (or a concatenation of the hash 
value with other information, such as a user identification number and postage value) 
using a cryptogrq)hic key of the end user or of the certifying authority 44, and marks 
representative of or corresponding to tiie resulting signature may be placed onto surfece 
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1 1 as marks 8 by a conventional printing system. Advantageously, the end user in this 
alternative arrangement need not employ an imaging device 46 and source 34 to gener- 
ate the string and cryptographic signature. This may substantially reduce the cost and 
simplify the construction ofthe system used by the end iiser to generate niark^ Also 
advantageously in this alternative, envelopes may be &bricated without preprinted 
postage values and valid postage may be obtained by the end user. 

Additional modifications are also possible. For example, the device 46 may be 
integrated or comprised in printing mechanism 36 of apparatus 30. Alternatively, the 
device 46 may comprise a standalone type of imaging device (e.g., digital camera, 
scarmer, etc.) Also, the registration sensor 40 may be comprised or integrated in the 
imaging device 46. 

Further, if q>propriately modified, the fimctionality of apparatus 30 and 41 may 
be combined and one imaging device 46 may be used both to generate images 47 and to 
scan the marks 8. Additionally, the £q[>paratus 30 and 41 , or functional components 
thereof niay be comprised in postal mailpiece sorting q>paratus. Accordingly, the pre- 
sent invention is intended to be viewed quite broadly, as encompassing all such alter- 
natives, modifications, and variations as may be ^parent to those skilled in the art, and 
as being defined only as forth in the appended claims. 

What is claimed is: 
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CLAIMS 

1 . An indicium for placement on a woriqiiece for use in determining 
whether the woikpiece is valid, comprising: 

a set of one or more maridngs corresponding to at least one of a signature from 
a certifying authority (CA) and a string, said signature being based at least in part iqx)n 
said string wherein, if said woikpiece is valid, said string is based upon, at least in part, 
intrinsic physical characteristics of at least one portion of said woikpiece, said physical 
characteristics incliiding one or more images of surface topogr^hical appearance of 
said at least one portion of said woikpiece resulting v/hea the at least one portion of 
said woikpiece is illuminated with electromagnetic radiation fiom different illumina- 
tion positions relative to said at least one portion. 

2. An indicium according to claim 1, wherein said one or more maf lcifigg 
comprise at least one of the fi3llowing on said workpiece: a barcode, a sequence of dig- 
its, and a spread-q)ectium marking 

3. An indiciimi according to claim 1, wherein said workpiece con^nises a 
postal mailpiece. 

4. An indicium according to claim 1 , wherein said worlq)iece comprises a 
postal mailpiece, and said string is also representative of a postage value associated 
with said mailpiece, if said woikpiece is valid. 
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5. An indicium according to claim 4, wherein said indicium is imprinted on 
said mailpiece by an apparatus, and said string also identifies the apparatus, if said 
worlq^iece is valid, 

6. An indiciimi according to claim 5, herein said string is based upon re- 
spective numerical values representative of: one or more hash values representative of 
said characteristics, said postage value, and an identification value identifying said ap- 
paratus. 

7. An indicium according to claim 1, herein the different positions are at 
respective different oblique angles, and an identical azimutfaal angle, relative to the at 
least one portion of the worlq)iece. 

8. An indicium according to claim 1, wherein the different positions are at 
respective different azimuthal angles, and an identical oblique angle, relative to the at 
least one portion of the workpiece. 

9. An indicium according to claim 1 , wherein a portion of the radiation is 
reflected fit>m the at least one portion at an angle that is normal to a sur&ce of the at 
least one portion, and the one or more images are generated fiom said portion of the 
radiatioa 

10. An indicium according to claim 1 , wherein the radiation comprises co- 
herent Ught 
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11. An indicium according to claim 1 , wherein the at least one portion com- 
prises a plurality of portions of the workpiece. 

12. An indicium according to claim 1 , wherein said string is based iq)on, at 
least in part, a concatenation of a plurality of numerical hash values derived fiom said 
one or more images. 

13. An indicium according to claim 1, wherein said string is based upon, at 
least in part, differences between the one or more images. 

14. Apparatus for use in generating a string for use in determining whether a 
worlq)iece is valid, comprising: 

an electromagnetic radiation source for illuminating at least one portion of the 
woriq)iece with electromagnetic radiation from different illumination positions relative 
to said at least one portion; 

an imaging device for generating one or more images of sur&ce topographical 
appearance of said at least one portion when the at least one portion is illuminated with 
the radiation by the source at the different iUumination positions; and 

a string generator that generates the string based upon, at least in part, the one or 
more images. 

15. Apparatus according to claim 14, further comprising a mechanism that 
marks the workpiece with a set of one or more markings corresponding to at least one 
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of a signature from a certifying authority (CA) and the string, the signature being based 
upon the string and a cryptographic key of the CA. 

1 6. Apparatus according to claim 1 5, wherein said one or more markings 
comprise at least one of the following on said workpiece: a barcode, a sequence of dig- 
its, and a spread-spectrum marking. 

1 7. Apparatus according to claim 1 5, herein said workpiece comprises a 
postal mailpiece. 

1 8. Apparatus according to claim 1 5, wherein said workpiece comprises 
postal mailpiece, and said string is also representative of apostage value associated 
with said mailpiece, if said worlq)iece is valid. 

19. Apparatus according to claim 18, wherein said one or more mATlringg are 
imprinted on said mailpiece, and said string is also identifies the apparatus, if said 
worlqpiece is valid. 

20. Apparatus according to claim 19, wherein said string is based upon re- 
spective numerical values representative of: one or more hash values representative of 
said appearance, said postage value, and an identification value identifying said appa- 
ratus. 
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2 1 . Apparatus according to claim 14, wherein the different positions are at 
respective different oblique angles, and an identical azimuthal angle, relative to the at 
least one portion of the workpiece. 

22. Apparatus according to claim 14, wherein the different positions are at 
respective different azimuthal angles, and an identical oblique angle, relative to the at 
least one portion of the wotkpiece. 

23. ^paratus according to claim 14, wherein a portion of the radiation is 
reflected from the at least one portion at an angle that is normal to a sur£ice of the at 
least one portion, and the one or more images are g^erated from said portion of the 
radiation. 

24. Apparatus according to claim 1 4, wherein the radiation comprises co- 
herent light 

25. Apparatus according to claim 14, wherein the at least one portion com- 
prises a plurality of portions of the worlq)iece. 

26. Apparatus according to claim 14, herein said string is based upony at 
least in part, a concatenation of a plurality of numerical hash values derived from said 
one or more images. 



30 



wo 00/65541 



PCT/USOO/10535 



27. Apparatus according to claim 14, wherein said string is based upon, at 
least in part, differences between the one or more images. 

28. Method for generating a string for use in determining whether a work- 
piece is valid, comprising: 

illuminating at least one portion of the workpiece with electromagnetic radiation 
from different illumination positions relative to said at least one portion; 

generating one or more images of sur&ce topographical appearance of said at 
least one portion when the at least one portion is illuminated with the radiation at the 
different illumination positions; and 

generating the string based i^n, at least in part, the one or more images. 

29. Method according to claim 28, further comprising mar Vi'ng the work- 
piece with a set of one or more markings corresponding to at least one of a signature 
from a certifying authority (C A) and the string, the signature being based upon the 
string and a cryptogmphic key of the CA. 

30. Method according to claim 29, \^erein said one or more maTki'ngg com- 
prise at least one of the following on said wo]iq>iece: a barcode, a sequence of digits, 
and a spread-spectrum marking. 

3 1 . Method according to claim 28, wherein said workpiece comprises a 
postal mailpiece. 
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32. Method according to claim 29, wherein said workpiece comprises a 
postal mailpiece, and said string is also representative of a postage value associated 
with said mailpiece, if said workpiece is valid. 

33- Method according to claim 32, wherein said one or more markings are 
imprinted on said mailpiece hy an ^paratus, and said string also identifies the ^para- 
tus, if said worlq)iece is valid. 

34. Method according to claim 33, herein said string is based upon respec- 
tive numerical values representative of: one or more hash values representative of said 
qjpearance, said postage value, and an identification value identifying said apparatus. 

35 . Method according to claim 28, wherein the different positions are at dif- 
ferent oblique angles, and an identical azimuthal angle, relative to the at least one por- 
tion of the woriq)iece. 

36. Method according to claim 28, wherein the different positions are at re^ 
spective different azimuthal angles, and an identical oblique angle, relative to the at 
least one portion of the woricpiece. 

37. Method according to claim 28, wherein a portion of the radiation is re- 
flected fit)m the at least one portion at an angle that is normal to a surface of the at least 
one portion, and the one or more images are generated ftom said portion of the radia- 
tion. 
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1 38. Method according to claim 28, wherein the radiation comprises coherent 

2 Ught 

1 39. Method according to claim 28, wherein the at least one portion com- 

2 prises a plurality of portions of the worIq)iece. 

1 40. Mefliod according to claim 28, wherein said string is based upon, at least 

2 in part, a concatenation of a plurality of numerical hash values derived fiom said one or 

3 more images. 

1 41. Method according to claim 28, M^ierein said striiig is based iq)ori, at least 

2 in part, differences between the one or more images. 

1 42. Computer-readable memory comprising computer-executable program 

2 instructions for use in generating a string for use in determining v^ether a worlq)iece is 

3 valid, the instructions ^en executed causing: 

4 illimiination of at least one portion of the workpiece with electromagnetic ra- 

5 diation from different iUumination positions relative to said at least one portion; 

6 generation of one or more images of sur&ce topogrz^hical ^>pearance of said at 

7 least one portion when the at least one portion is illuminated with the radiation at the 

8 different illumination positions; and 

9 generation of the string based upon, at least in part, the one or more images. 
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1 43 . Memory according to claim 42, wherein the instructions when executed 

2 also cause marking of the workpiece with a set of one or more markings corresponding 

3 to at least one of a signature from a certifying authority (CA) and the string, the signa- 

4 ture being based upon the string and a cryptographic key of the CA. 



1 44. Memory according to claim 43, v^erein said one or more markings 

2 comprise at least one of the following on said workpiece: a barcode, a sequence of dig- 

3 its, and a spread-spectrum marking. 

1 45. Memory according to claim 42, wlierein said worlq>iece comprises a 

2 postal mailpiece. 

1 46. Memory according to claim 43, herein said workpiece comprises a 



2 postal mailpiece, and said string is also represCTitative of apostage value associated 

3 with said mailpiece, if said workpiece is valid. 

1 47. Memory according to claim 46, >^erein said one or more markings are 

2 imprinted on said roailpiece by an qiparatus, and said string also identifies the ^para- 

3 tus, if said worlqpiece is valid. 

1 48. Memory according to claim 47, \^erein said string is based upon re- 

2 specti ve numerical values representative of: one or more hash values representative of 

3 said appearance, said postage value, and an identification value identifying said appa- 

4 ratus. 
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49. Memory according to claim 42, wherein the different positions are at re- 
spective different oblique angles, and an identical azimuthal angle, illative to the at 
least one portion of the worlq>iece. 

50. Memory according to claim 42, wherein the different positions are at re- 
spective different azimuthal angles, and an identical oblique angle, relative to the at 
least one portion of the worlq)iece. 

51 . Memory according to claim 42, wherein a portion of the radiation is re- 
flected jBx)m die at least one portion at an angle that is normal to a sur&ce of the at least 
one portion, and the one or more images are generated from said portion of the radia- 
tion. 

52. Memory according to claim 42, vdierein the radiation comprises coher- 
ent light 

53. Memory according to claim 42, wherein the at least one portion com- 
prises a plurality of portions of the workpiece. 

54. Memory according to claim 42, herein said string is based upon, at 
least in part, a concatenation of a plurality of numerical hash values derived from said 
images. 
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55. Memory according to claim 42, wherein said string is based upon, at 
least in part, differences between the images. 

56- An indicium according to claim 1 , wherein the at least one portion is il- 
luminated with the radiation simultaneously fiom the different illumination positions. 

57. An indicium according to claim 1, \^erein the one or more images 
comprise a plurality of respective images of sur&ce topographical ^ipearances of the at 
least one portion resultmg when the at least one portion is illummated with the radiation 
fiom respective illumination positions relative to the at least one portion. 

58. An indiciimi according to claim 1, \^erein the string is based iqx>n, at 
least in part, a numerical hash value derived fiom the one or more images, the value 
being generated by a process that inchides extracting fiom the one or more images a 
first image portion scaling the first image portion to generate a scaled image portion, 
averaging pixel value of the scaled image portion to generate a first filtered image, ex- 
tracting fix)m the first filtered image a second image portion, averaging pixel values of 
the second image portion to generate a second filtered unage, and subtracting corre- 
sponding pixel value of the second filtered image form the second image portion to 
generate a third filtered image. 

59. Apparatus according to claim 14, wherein the at least one portion is il- 
luminated with the radiation simultaneously fiom the different illumination positions. 
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60. Apparatus according to claim 14, wherein the images of surface topog- 
raphical appearances of the at least one portion resulting when the at least one portion 
is illimiinated with the radiation from respective illimiination positions relative to the at 
least one portion. 

61. Apparatus according to claim 14, lAdierein the string is based upon, at 
least in part, a numerical hash value derived fiom the one or more images, the value 
being generated by a process that includes extracting from the one or more images a 
first image portion, scaling die first image portion to generate a scaled image portion, 
averaging pixel values of the scaled image portion to generate a first filtered image, 
extracting from the first filtered image a second image portion, averaging pixel values 
of the second image portion to generate a second filtered image, and subtracting corre- 
sponding pixel values of the second filtered image fiom the second image portion to 
generate a third filtered image. 

62. Method accordmg to claim 28, A^ercin the at least one portion is illumi- 
nated with the radiation simultaneously from the different illumination positions. 

63. Method according to claim 28, wherein the one or more images com- 
prise a plurality of respective images of surface topogr^hical appearances of the at 
least one portion resulting \^en the at least one portion is illuminated with the radiation 
from respective illumination positions relative to the at least one portion. 
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64. Method according to claim 28, wherein the sting is based upon, at least 
in part, a numerical hash value derived from the one or more images, the value being 
generated by aprocess that includes extracting from the one or more images a first im- 
age portion, scaling the first image portion to generate a scaled image portion, averag- 
ing pixel values of the scaled image portion to generate a first filtered image, extracting 
from the first filtered image a second image portion, averaging pixel values of the sec- 
ond image portion to generate a second filtered image, and subtracting corresponding 
pixel values of die second filtered image from the second image portion to generate a 
third filtered image. 

65. Memory according to claim 42, Mdierein at least one portion is illimii- 
nated vnAi the radiation simultaneoiisly fix)m the different illumination positions. 

66. Memory according to claim 42, \^erein the one or more images com- 
prise a plurality of respective images of sur&ce topogr^hical ^jpearances of the at 
least one portion resulting \^en the at least one portion is illuminated with the radiation 
fiom respective illtmiinafion positions relative to the at least one portion. 

67. Memory according to claim 42, wherein the string is based upon^ at least 
in part, a numerical hash value derived from the one or more images, the value being 
generated by a process that includes extracting firom the one or more images a first im- 
age portion, scaling the first image portion to generate a scaled image portion, averag- 
ing pixel values of the scaled image portion to generate a first filtered image, extracting 
fix)m the first filtered image a second page portion, averaging pixel values of the second 
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image portion to generate a second jBltered image, and subtracting corresponding pixel 
values of the second filtered image from the second image portion to generate a thinl 
filtered image. 

68. An indidimi according to claim 1, ^iierein the one or more images are 
generated using one of a linear array of photosensing elements, a two-dimensional ar- 
ray of photosensing elements and a single photosCTsing element 

69. Apparatus according to claim 14, \^erein the imaging device comprises 
one of a linear array of photosensing elements, a two-dimensional array of photo- 
sensing elements and a single photosensing element 

70. Method according to claim 28, herein the one or more images are gen- 
erated using one of a linear array of photosensing elements, a two-dimensional array of 
photosensing elements and a single photosensing element 

71. Memory according to claim 42, \^ierein the one or more images are 
generated using one of a linear array of photosensing elements, a two-dimensional ar- 
ray of photosensing elements and a single photosensing element 

72. An indiciimi according to claim 1 , herein the indicium uniquely identi- 
fies the wo]iq)iece. 
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73. Apparatus according to claim 14, wherein the string uniquely identifies 
the workpiece. 

74. Method according to claim 28, wherein the string uniquely identifies the 
worlqriece. 

75. Memory according to claim 42, wherein the string uniquely identifies 
the woriq)iece. 

76. An indicium according to claim 1, herein the string is based, at least in 
part, upon an averaging of portions of the one or more images. 

77. An inidicum according to claim 1, v^erein the string is based, at least in 
part, iq>on a calculation of principal components of the one or more images. 

78. Apparatus according to claim 14, ^^erein the string is based, at least in 
part, upon an averaging of portions of the one or more images. 

79. Apparatus according to claim 14, wherein the string is based, at least in 
part, iqx>n a calculation of principal components of the one or more images. 

80. Method according to claim 28, wherein the string is based, at least in 
part, upon an averaging of portions of the one or more images . 
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8 1 . Method according to claim 28, wherein the string is based, at least in 
part, upon a calculation of principal components of the one or more images. 

82. Memoiy according to claim 42, wherein the string is based, at least in 
part, upon an averaging of portions of the one or more images. 

83. Memory according to claim 42, wherein the string is based, at least in 
part, upon a calculation of principal componCTits of the one or more images. 
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